American Express

Below we inform you about the processing of your personal data in connection with the use of our online offering.

Responsible

Evelina Storm

Falcon Street 9
30449 Hanover

Phone: 01746977011
Mail: bpc.storm@gmail.com

Contact person

For questions regarding data protection, please contact the contact details provided above.

Storage duration

We generally delete your personal data when it is no longer necessary for the purposes for which it was collected or otherwise processed.

If we have requested your consent and you have granted it, we will delete your personal data if you revoke your consent and there is no other legal basis for the processing.

We will delete your personal data if you object to the processing and there are no overriding legitimate reasons for the processing, or if you object to the processing for the purpose of direct marketing or profiling associated with it.

If deletion is not possible because processing is still required to fulfill a legal obligation (statutory retention periods, etc.) to which we are subject, or for the assertion, exercise, or defense of legal claims, we will restrict the processing of your personal data.

Further information on the storage duration can also be found in the following passages.

Your rights

You have the following rights regarding your personal data:
- Right to information
- Right to correction
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability

You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data that is based on Article 6(1)(e) or (f) of the GDPR; this also applies to profiling supported by these provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If we process your personal data to carry out direct marketing, you have the right to object at any time to the processing of your personal data for such advertising purposes; this also applies to profiling, insofar as it is related to such direct marketing. We will then no longer process your personal data for these purposes.

You have the right to withdraw your consent to the processing of your personal data at any time, provided you have given us such consent. The withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent prior to its withdrawal.

You have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data.

Provision of your personal data

The provision of your personal data is generally neither legally nor contractually required and is not necessary for entering into a contract. You are generally not obligated to provide your personal data. Should this ever be the case, we will inform you separately when collecting your personal data (for example, by marking the mandatory fields in input forms).

The non-provision of your personal data regularly means that we cannot process your personal data for any of the purposes described below, and you will not be able to take advantage of an offer related to the respective processing (example: Without providing your email address, you will not receive our newsletter).

Web hosting

For web hosting, we use external services. These services may have access to personal data that is processed as part of the use of our online offering.

Contact

If you contact us, we will process your personal data to handle your inquiry.

If we have requested your consent and you have granted it, the legal basis for processing is Art. 6 (1) lit. a GDPR. If we have not requested your consent, the legal basis for processing is Art. 6 (1) lit. f GDPR. Our legitimate interest in this case is handling your inquiry. If the processing is necessary to fulfill a contract with you or to carry out pre-contractual measures based on your request, the legal basis for processing is also Art. 6 (1) lit. b GDPR.

Cookies & similar technologies

Cookies are used. Cookies are text information stored on your device. There is a distinction between session cookies, which are deleted immediately after you close your browser, and persistent cookies, which are only deleted after a certain period of time.

In addition to cookies, similar technologies (tracking pixels, web beacons, etc.) may also be used. The following explanations regarding cookies also apply to similar technologies. Likewise, these explanations apply to further processing activities related to cookies and similar technologies (analysis & marketing, etc.). This is especially true for any consent you may have given for the use of cookies, which also extends to other technologies and to further processing activities related to cookies and similar technologies.

Cookies can be used to enable the use of certain functions. Cookies can also be used to measure the reach of our online offering, tailor it to meet needs and interests, and thereby optimize our online offering and marketing. Cookies can be employed by us and by external services.

If we have requested your consent and you have granted it, the legal basis for processing is Art. 6 (1) lit. a GDPR. If we have not requested your consent, the legal basis for processing is Art. 6 (1) lit. f GDPR. Depending on the purpose of the processing, our legitimate interests can be derived from the following passages.

You can prevent the storage of cookies by adjusting the settings in your browser. Below, we provide links for typical browsers where you can find more information on managing cookie settings:
- Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop
- Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
- Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d
- Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
- Opera: https://help.opera.com/de/latest/web-preferences/#cookies
- Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html

Further options for objection can be found at the following links: https://www.youronlinechoices.eu/, https://youradchoices.ca/en/tools, https://optout.aboutads.info/?c=2&lang=EN and https://optout.networkadvertising.org/?c=1.

If you prevent the storage of cookies, this may affect the proper functioning of our online offering. If you delete all cookies, the aforementioned settings will also be lost and must be re-entered.

Furthermore, you can activate the "Do-Not-Track" feature in your browser to signal that you do not wish to be tracked. Below, we provide links for common browsers where you can find more information about the "Do-Not-Track" setting:
- Firefox: https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
- Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
- Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/verwenden-von-do-not-track-in-internet-explorer-11-ad61fa73-d533-ce96-3f64-2aa3a332e792
- Opera: https://help.opera.com/de/latest/security-and-privacy/
- Since February 2019, Safari no longer supports the “Do-Not-Track” function. Website tracking across sites can be prevented in Safari using the following link: https://support.apple.com/de-de/guide/safari/sfri40732/12.0/mac
- Yandex: https://yandex.com/support/browser/personal-data-protection/ytp.html

Shop

If you place an order, we will process your personal data to handle and fulfill your order and to comply with the associated rights and obligations.

If you create a customer account, we will process your personal data to provide the customer account and associated features (such as the forgot password function), enhance your shopping experience, and simplify the ordering process for future purchases.

If we have requested your consent and you have granted it, the legal basis for processing is Art. 6 Para. 1 lit. a GDPR. If we have not requested your consent, the legal basis for processing is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest in this case is the handling and processing of your order. If the processing is necessary to fulfill a contract with you or to carry out pre-contractual measures based on your inquiry, the legal basis for processing is additionally Art. 6 Para. 1 lit. b GDPR.

Recipients of your personal data may be third parties (fulfillment service providers, IT service providers, shipping or transport service providers, banks, tax advisors, lawyers, authorities, etc.), insofar as this is necessary for processing and handling your order and the associated rights and obligations.

To process payments, we use external services. We transmit your personal data to these services to the extent necessary for the processing of payments. For more information about the services used, the scope of data processing, and the technologies and procedures involved in using each service, please refer to the additional information about the services we use at the end of this section and via the links provided there.

American Express
Provider: American Express Europe S.A., Germany.
Website: https://www.americanexpress.com/de-de/
Further information & data protection: https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html?inav=de_legalfooter_dataprivacy

Apple Pay
Provider: Depending on your home country, Apple services are provided by Apple Distribution International Ltd., Ireland, or another company (viewable at https://www.apple.com/de/legal/internet-services/itunes/de/terms.html) offered.
Website: https://www.apple.com/de/apple-pay/
Further information & data protection: https://www.apple.com/de/legal/privacy/
Guarantee: EU Standard Contractual Clauses. A copy of the EU Standard Contractual Clauses can be requested from us.

Google Pay
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://pay.google.com/intl/de_de/about/
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Klarna
Provider: Klarna Bank AB (publ), Sweden.
Website: https://www.klarna.com/de/
Further information & data protection: https://www.klarna.com/de/datenschutz/

Mastercard
Provider: Mastercard Europe SA, Belgium.
Website: https://www.mastercard.de
Further information & data protection: https://www.mastercard.de/de-de/datenschutz.html

Mollie
Provider: Mollie B.V., Netherlands.
Website: https://www.mollie.com/de
Further information & data protection: https://www.mollie.com/de/privacy

PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
Website: https://www.paypal.com/de/home/
Further information & data protection: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

Stripe
Provider: Stripe Payments Europe, Ltd., Ireland. Stripe Payments Europe, Ltd. is a subsidiary of Stripe, Inc., United States of America.
Website: https://stripe.com/de
Further information & data protection: https://stripe.com/de/privacy
Guarantee: EU Standard Contractual Clauses. A copy of the EU Standard Contractual Clauses can be requested from us. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Visa
Provider: Visa Inc., United States of America.
Website: https://www.visa.de
Further information & data protection: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html

Newsletter

If we have requested your consent and you have granted it, we will process your email address to conduct email marketing and, if applicable, additional personal data to personally address you. The legal basis for the processing is Art. 6 Para. 1 lit. a DS-GVO. The contents of the email marketing will be specifically outlined when obtaining your consent. Furthermore, the email marketing contains information about us, our products, and services.

We use the so-called Double-Opt-In procedure to prevent potential misuse of your personal data. To do this, we send an email to the email address you provided after collecting your email address, asking you to confirm that you actually wish to receive email marketing. The legal basis for processing is Art. 6 Para. 1 lit. f DS-GVO. Our legitimate interest is the legally compliant execution of email marketing.

We record the time you grant your consent and the time of your confirmation, as well as your IP address and the content of your consent declaration, to be able to prove the legally compliant collection of your consent. The legal basis for processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest lies in the legally compliant execution of email marketing.

You can revoke your consent at any time. The revocation of your consent does not affect the lawfulness of the processing carried out based on the consent up until the point of revocation. To revoke your consent, you can use the designated link in the emails or contact us using the contact details provided above.

If you have withdrawn your consent, we reserve the right to process your personal data in a so-called blacklist/blocklist to ensure that no further email marketing related to these personal data will occur in the future. The legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest is the avoidance of unwanted email marketing.

Customer Retention Marketing - Advertising via Email

If we have received your email address in connection with the sale of a product or service and you have not objected to this, we will process your email address to conduct email marketing for our own similar products or services, and possibly additional personal data to address you personally. The legal basis for this processing is Art. 6 Para. 1 lit. f DS-GVO. Our legitimate interest lies in direct marketing.

You have the right to object to the processing of your personal data for the purpose of email marketing at any time, without incurring any costs other than the transmission costs according to the basic rates. We will then no longer process your personal data for the purpose of email marketing. To object to the processing of your personal data for the purpose of email marketing, you can use the designated link in the emails or contact us using the contact details provided above.

If you have objected to the processing of your personal data for the purpose of email marketing, we reserve the right to process your personal data in a so-called blacklist/blocklist to ensure that no further email marketing related to these personal data will occur in the future. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the avoidance of unwanted email marketing.

Analysis & Marketing

We process your personal data to measure the reach of our online offerings, tailor them to demand and interests, and thereby optimize our online offerings and marketing.

For analysis and marketing purposes, we use external services. This may also involve profiling (for advertising purposes, personalized information, etc.). The profiling can take place across services and devices. Further information about the services used, the scope of data processing, the technologies and procedures involved in the use of each service, whether profiling occurs when using each service, and, if applicable, information about the underlying logic as well as the significance and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

You can find more information about cookies & similar technologies further up.

Google Ads Conversion-Tracking
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/1722022?hl=de
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google AdSense
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.google.com/intl/de_de/adsense/start/
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google Analytics
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Further information & data protection: https://support.google.com/analytics/answer/6004245?hl=de, https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google Analytics 360
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Gordon House, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/about/analytics-360/
Further information & data protection: https://support.google.com/analytics/answer/6004245?hl=de, https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google Analytics 4
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/analytics/answer/10089681?hl=de
Further information & data protection: https://support.google.com/analytics/answer/6004245?hl=de, https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google Remarketing
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/2453998
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google Search Ads 360
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/intl/de/about/search-ads-360/
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Google Signals
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/analytics/answer/7532985?hl=de&ref_topic=7668613#zippy=%2Cthemen-in-diesem-artikel
Further information & data protection: https://support.google.com/analytics/answer/6004245?hl=de, https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Social media presence

We maintain social media presences on external platforms to communicate with users and optimize our online offerings and marketing.

This privacy policy also applies to the following social media presences:

Instagram : Profinails_onlineshop

When using external services, profiling (for advertising purposes, personalized information, etc.) may also occur. Profiling can take place across different services and devices. Further information about the services used, the scope of data processing, the technologies and procedures involved in the use of each service, as well as whether profiling occurs when using a particular service, and if applicable, information about the underlying logic and the significance and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and via the links provided there.

Facebook
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.facebook.com
The provider and we are jointly responsible. We have entered into a corresponding agreement with the provider. This agreement can be found under https://www.facebook.com/legal/terms/page_controller_addendum and https://www.facebook.com/legal/controller_addendum to see.
Further information & data protection: https://developers.facebook.com/docs/plugins/, https://www.facebook.com/legal/terms/information_about_page_insights_data, https://www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, https://www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. A copy of the EU Standard Contractual Clauses can be requested from us. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Instagram
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.instagram.com
Further information & data protection: https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875
Guarantee: EU Standard Contractual Clauses. A copy of the EU Standard Contractual Clauses can be requested from us. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Cards

We use maps from external services to show you our location and to enable the use of additional features of these external services in connection with the maps.

If we have requested your consent and you have granted it, the legal basis for processing is Art. 6 (1) lit. a DS-GVO. If we have not requested your consent, the legal basis for processing is Art. 6 (1) lit. f DS-GVO. Our legitimate interest is the simplified use of maps.

Google Maps
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.google.de/maps
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Search engines

We use search engines from external services to provide you with better results when searching through our online offering and to optimize our online offering.

If we have requested your consent and you have granted it, the legal basis for processing is Art. 6 Para. 1 lit. a DS-GVO. If we have not requested your consent, the legal basis for processing is Art. 6 Para. 1 lit. f DS-GVO. Our legitimate interest in this case is the optimization of our online offerings.

Google Programmable Search Engine
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://programmablesearchengine.google.com/about/
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Review platforms

We use review platforms and process your personal data to have our services evaluated, thereby optimizing our online offerings and marketing.

If we or the review platforms we use have requested your consent and you have granted it, we or the review platforms we use will process your personal data to remind you to submit a review. The legal basis for the processing is Art. 6 Para. 1 lit. a DS-GVO.

Further information on the review platforms we use, the scope of data processing, and the technologies and procedures involved in using the respective review platforms can be found in the additional information about the review platforms we use at the end of this section and via the links provided there.

Google Customer Reviews
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/merchants/answer/7124326?hl=de
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

ProvenExpert
Provider: Expert Systems AG, Germany.
Website: https://www.provenexpert.com/de-de/
Further information & data protection: https://www.provenexpert.com/de-de/datenschutzbestimmungen/

Trusted Shops
Provider: Trusted Shops SE, Germany.
Website: https://www.trustedshops.de/bewertungen/
Further information & data protection: https://www.trustedshops.de/impressum/#datenschutz

Trustpilot
Provider: Trustpilot A/S, Denmark.
Website: https://de.trustpilot.com/
Further information & data protection: https://de.legal.trustpilot.com/end-user-privacy-terms

Captchas

We use captchas to protect our online offering from abusive, machine-generated, and/or automated inputs (for example, in forms) and to prevent any potential misuse.

To provide the captchas, we use external services. This may also involve profiling. The profiling can take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures involved in the use of each service, as well as whether profiling occurs when using each service, and if applicable, information about the logic involved and the scope and intended effects of such processing for you, can be found in the additional information about the services we use at the end of this section and under the links provided there.

Google reCAPTCHA
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.google.com/recaptcha/
Further information & data protection: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transmission of personal data to third countries occurs depending on the respective Google service and under the application of various EU standard contractual clauses, provided these are offered by Google. For more information on this and Google's responsibility, please visit the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov) connected, which ensures compliance with an adequate level of data protection based on a decision by the European Commission.

Comments

If you leave comments using the designated functions (for blog posts, products, etc.), we process your personal data to display your comments and prevent any potential misuse.

If we have requested your consent and you have granted it, the legal basis for processing is Art. 6 Para. 1 lit. a DS-GVO. If we have not requested your consent, the legal basis for processing is Art. 6 Para. 1 lit. f DS-GVO. Our legitimate interest is the proper display of your comments and the prevention of misuse.

This privacy policy was created with the configurator from getLaw.de created.

Delivery Surcharge!

Privacy Policy